Force logon even for domain users

Posted on 2004-11-03
Last Modified: 2008-01-09

I've got an IIS 5 server running. I've got things setup so that users need to logon using their domain user name and password (integrated security).

Things work fine. But when working from e.g. my local workstation, I am not prompted for a username, the server see's the way i am logged on to windows and since that account is valid, it will us that account for browsing the website.

Is there a way to force me to logon (and there by enableing me to use a different user)?

Question by:palloquin
    LVL 57

    Expert Comment

    by:Pete Long
    open the IIS admin console (under admin tools) or add it into a mmc console

    right click default website, properties look for the security settings and untick allow anonymous login

    Author Comment

    uh... Thank you but I had that down :)

    I have disabled anonymous logins, but because I am on the same network, IIS uses (my clients) windows logon user (which is a network user).

    LVL 33

    Expert Comment

    If you disable the anonymous access and enable the Integrated Windows Authentication that even network users will be prompted for a username/password.  I have Win2kServer/IIS5 set up here at home and I just tested it.
    LVL 37

    Expert Comment

    have you got both plain *and* integrated enabled?

    LVL 14

    Expert Comment

    What you are asking for requires you to have basic authentication ONLY enabled.  (you will also need to check that the default domain is correct for your user accounts to authenticate).

    If you use anonymous it will use the iusr account to authenticate.
    If you use integrated it will use the currently logged on user to authenticate.

    Ensure you ONLY have basic authentication ticked and it should always prompt for credentials allowing you to enter whichever user's credentials you wish.

    Credentials will need to be entered in the format:

    Accepted Solution

    As what i understand from your first post, maybe you can try this. Go to your Internet Explorer (if you are using it), click Tools -> Security -> Custom Level -> Users Authentication -> ckeck the "Prompt for a username and password".

    The IE by default will use your logon for any domain authentication. Therefore when you test from your computer, it will actually use your current logon as the authentication parameters.

    I might wrong, please correct me if you get the Real solution. Hope this helps!
    LVL 1

    Expert Comment

    what if you want the opposite?  For the server to authenticate through the domain?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
    Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    This video discusses moving either the default database or any database to a new volume.

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now